Applicant: Ding, et al. 
Filed: May 15,2006 

Amendment and Response to Non-final Office Action 
Amendments to the Specification: 

Please replace the Abstract with the following amended Abstract: 

The present invention discloses a digital signature scheme based on braid group conjugacy 
problem and a verifying method thereof, wherein the a signatory S selects three braids x € 
LB m (l),x' € B n (/), a e B„ (0, and considers braid pair(x \x) as a public key of S, braid a as a 
private key of S; Signatory S uses hash function h for a message M needing signature to get 
y=h(M) e B n (/); generating a braid b e RB n .i. m (l) randomly, then signing th e message M with the 
own privat e k ey a and th e braid b generated randomly to obtain Sign(M)=a~ l byb~" 'a; a signature 
verifying party V obtains the public key of S, calculating the message M by employing a^ystem 
paramet e r hash function h, obtaining the y=h(M): judging whether sign(M) and v, sien/Mh' and 
jcv_are conjugate or not, if not, sign(M) is an ill e gal signature, tho verification fails; if yes, sign(M) 
is a legal signature of message M; the present invention avoids th e problem of k - CSP in SCSS 
s ignatur e schomo of prior art, and improv e s th e se curity of signatur e algorithm and reduces the 
number of braids involved and the number for conjugacy decision without reducing security, 
thereby improving the operation efficiency of signature. 

Please replace the paragraph beginning on page 4, lines 1 3-1 5, with the following amended 
paragraph: 

Step If. judging whether x' belongs to the supper summit set SSSfx) and whether l(x) <d, if 
all conditions are yes, outputtingOc, x) as public key, a as private key; if either of them is not, 
performing step le. 

Please replace the paragraph on page 5, lines 7-10, with the following amended paragraph: 

In this method, the form for obtaining public key of the signatory S in step 1 is an out-band 
form or the form of receiving public key transmitted from the signatory S; Algorithm Conjugacy 
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decision algorithm in braid Rroups BCD A is employed in judging whether sign(M) and y are 
conjugate or not in step 3 and whether sign(M) x ' and xy are conjugate or not in step 4. 
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